COLUMBUS, Ohio (WCMH) — Attention, shoppers; Amazon’s Prime Big Deal Days are here again! Two days of discounts on tech gadgets, beauty products and more, as many begin to think about shopping for the holidays.

Unfortunately, as Better Call 4 has told you before, significant sales events like this lead to a rise in scams targeting online shoppers. President of the Better Business Bureau of Central Ohio Judy Dollison has said one tactic scammers often employ is pretending to be Amazon.

“Websites can be faked, and they can look so professional,” said Dollison. “They will actually use the logos and the typeface of the legitimate company.”

That’s why Dollison said it’s important for shoppers to pay close attention to details. Don’t respond to unexpected messages claiming to come from the retailer, and don’t click on any links they contain. Always go directly to the source, and when you’re ready to buy, pay with a credit card, so if you need to dispute a charge, you can.

Watch: Amazon deal days open door for scammers

But don’t let your guard down as you wait for the products you purchased to show up on your porch. Both the BBB and Hilliard Divison of Police recently posted about the resurgence of the brushing scam.

When it first appeared, it was relatively harmless. Third-party sellers on Amazon sent out random items to an address they found online, likely from a data leak, to make it appear as though you’re a verified buyer who wrote a glowing review of their products, in order to improve their ratings and their sales.

But now, there’s an added twist. Instead of a return address, the unexpected package has a QR code. When scanned, it claims to show you who sent it. In reality, it gives the sender access to your device, and all the personal information and financial details it contains.

“Scammers are very smart,” Dollison said. “And really, education is the best way to protect ourselves and avoid falling victim to scams.”

And remember, don’t click on anything you see advertised on social media. Again, go to the legitimate website by typing it into your web browser yourself, or use your app.

And if you see anything that seems suspicious, report it.